Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: 1oP4/5pBnaOtpPOMOWJa6DFYHtZhsg4Hb5TZ6WSiCVI=
Subject key identifier: F9:11:25:95:6C:AD:BF:2F:30:AC:15:00:8C:3F:30:96:29:46:5D:06
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 0196D32CC770984B2DCD8350F2EB6A310E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 143E
Signing time: Thu 15 May 2025 09:00:49 +0000
Manifest this update: Thu 15 May 2025 09:00:49 +0000
Manifest next update: Fri 16 May 2025 09:00:49 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: SSLSTwVsVw7FisICnYZqqk3f/vLMvgG61ZOrpJaoLnw=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:c7:70:98:4b:2d:cd:83:50:f2:eb:6a:31:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: May 15 09:00:49 2025 GMT
Not After : May 16 09:00:49 2025 GMT
Subject: CN=f91125956cadbf2f30ac15008c3f309629465d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:b3:40:8a:b2:7b:62:d0:87:cf:83:43:fe:
d4:12:9e:d6:d9:3a:3b:5b:a5:f0:40:68:a8:d3:f6:
85:08:64:a4:36:20:48:b8:b2:70:da:e9:07:d8:26:
44:ee:4a:db:07:ed:16:cb:12:82:1a:01:1d:90:e2:
d0:43:99:08:f8:1e:b8:1c:9a:09:90:8a:09:0e:9a:
0b:6e:e6:a0:5b:72:64:ca:37:31:bf:60:4e:c3:6a:
cf:7d:bc:c4:ec:45:b0:a0:2c:54:91:2f:dd:22:85:
b9:4d:22:c8:ac:81:3b:4b:35:a6:56:4c:70:20:7e:
bd:ed:5c:47:37:26:0b:77:d6:af:56:ff:ad:8d:80:
19:e1:61:cf:a9:a3:ba:ae:8e:01:c0:27:8f:10:08:
4d:6a:06:20:1f:81:27:e0:c9:e7:72:e4:d2:07:f3:
bb:d7:64:ab:ea:33:de:82:47:cb:1a:3a:52:c9:fb:
3d:52:68:a1:e4:00:15:bf:cf:4e:61:bf:72:19:6b:
a6:82:37:e8:1d:3a:a7:3b:cf:3e:8b:4e:d3:0d:68:
ae:28:5f:e6:5d:34:df:5d:4a:e2:c2:f7:e6:0a:c4:
02:45:0f:03:af:14:44:36:34:a8:59:5b:47:ce:26:
60:c3:59:d3:cf:bf:85:f7:1c:f0:06:3d:bc:19:b8:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:25:95:6C:AD:BF:2F:30:AC:15:00:8C:3F:30:96:29:46:5D:06
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:9a:ef:fb:06:81:3a:7b:83:cf:78:32:e1:7c:81:78:d5:
74:1a:a8:14:1a:50:5d:7c:62:8a:83:ce:9c:3e:9e:29:2f:7a:
e6:7c:c6:1f:cb:2e:cc:af:5b:41:27:7e:a2:01:3a:9e:25:a7:
81:c7:05:f2:a8:a2:64:dc:c0:cf:92:2f:bf:f5:b3:6e:1a:62:
08:05:4c:dc:14:ef:08:92:35:ed:88:42:5e:7f:77:d0:c0:5d:
5f:4b:ef:32:23:6e:33:03:c4:cc:18:25:ab:7e:14:27:74:0f:
1f:27:c4:5a:96:90:4c:6f:c2:1f:77:e4:8f:27:65:bb:5f:d9:
9f:c4:a3:17:ba:70:a1:ba:b8:d4:b2:04:eb:7a:85:53:2e:bf:
ad:60:cd:b2:b9:63:6f:06:d0:33:a5:9e:85:39:14:31:21:20:
c1:19:0a:80:a8:39:2b:3b:aa:58:2f:bf:01:fc:92:ae:63:3a:
24:1d:a1:c0:99:64:ce:df:c4:90:d0:8d:58:f1:95:a8:17:1e:
e0:df:c2:f1:25:ea:a3:9d:dc:a8:71:50:f2:17:23:78:0f:79:
05:93:5a:8b:22:13:02:a2:3d:e9:5b:72:15:2a:51:50:46:db:
47:d5:3c:92:21:33:a6:d8:b2:b5:d4:32:f3:f0:f2:e8:94:26:
94:ac:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:44:02 2025 by rpki-client